Worldpay users !

[rslyonserv]

Worldpay users be aware :

If you use Worldpay for payment then customers can trick hsphere and worldpay into thinking they have paid when they have not !

Here is how :

When placing order a email is sent to the customer saying
Please print out this message and send it along with payment to:

h ttps://select.worldpay.com/wcc/purchase?instId=33009&accId1=4017663&desc=&cartId= mail-2162&testMode=0&currency=GBP&amount=5.23&C_return= https://cp.hsphere.cc:8443/psoft/servlet/psoft.hsphere.CP&resultFile=mydomain

If they dont make payment on worldpay's site and copy and edit the URL and insert testMode=100 like below :

h ttps://select.worldpay.com/wcc/purchase?instId=33009&accId1=4017663&desc=&cartId= mail-2162&testMode=100 &currency=GBP&amount=5.23&C_return=https://cp.hsphere.cc:8443/psoft/servlet/psoft.hsphere.CP&resultFile=mydomain

this will put worldpay in test mode and will accept any cc card details. They then enter anyold details into worldpay and it is acepted. Worldpay then tells hsphere that payment has been made.


Check all orders !

[admin]

Thanks rslyonserv I will see if H-Sphere can do any thing about that..

[admin]

This is what I just got back from Psoft.


Thank you for the problem description. We will fix worldpay problems within 1-2 days.

[admin]

I am also moving this to customer only forum so no one gets ripped off because of this error being in the open.

[Garreg]

Originally posted by admin
I am also moving this to customer only forum so no one gets ripped off because of this error being in the open.

Admin: Good idea and thanks - I use World Pay, could you please keep us informed when PSOFT pull there finger out.

rslyonserv: Thanks for the tip - they would need to now something about the WorldPay system to do this, as 'normal' users do not know of the test mode setting, however, if it isn't fixed I'm sure word would get out pretty quick!

..................this is the second WorldPay 'flaw' haow can PSOFT wake such stupid mistakes?

[admin]

You got me Garreg.. I am sure they will get it fixed ASAP. They said 2 days so I give them till monday. Then I will check back to see if one of you guys can test this for me. If its not fixed I will push a little hard on them to see what we can get done as this could cost some one money and I don't want to see that happen.

[somereseller]

Garreg, never try to change you password and make it secure on Hsphere. This is a real mess...

[Garreg]

somereseller: Thanks - I'll put that on my list on 'no no's ' - which is now getting bigger than my list of 'can do's'